Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
File: _-BD2zfqJckthc5lp20aTlE2JKo.mft (raw, json)
Hash identifier: 6gsReUwPjG4ucpcT2Y0Zz6Dnp43Kt77Yc6iaKdpkfOc=
Subject key identifier: E7:80:59:7C:C6:B2:DA:8E:E5:F2:14:D2:53:FD:34:C4:06:4F:2E:5F
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 019F8F7F5908D61F607BFF42F8056A54BB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:55 +0000
Manifest this update: Thu 23 Jul 2026 15:01:55 +0000
Manifest next update: Fri 24 Jul 2026 15:01:55 +0000
Files and hashes: 1: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (hash: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=)
2: Qagt2LqaMAntgU09nCJSjOteJGI.roa (hash: hVVNYLozOrGf2eg6nP90ee7AH3HGnRwNnmP01BLSjaQ=)
3: _-BD2zfqJckthc5lp20aTlE2JKo.crl (hash: k4uGlDGzyktvqp0AnjdNvYGY/urUJ0yN7O1JiU5Aw9w=)
4: jGolEufnyPDfW166GsYrvcDadWI.roa (hash: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:59:08:d6:1f:60:7b:ff:42:f8:05:6a:54:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Jul 23 15:01:55 2026 GMT
Not After : Jul 24 15:01:55 2026 GMT
Subject: CN=e780597cc6b2da8ee5f214d253fd34c4064f2e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:ab:8e:82:ea:32:d0:bc:66:9e:a7:af:b4:
ae:7f:72:01:53:4a:b4:13:ee:2c:00:f8:18:81:bd:
68:34:4d:c4:6d:b0:cd:53:56:31:fc:0d:06:f6:99:
a2:92:83:dc:28:6c:c6:a8:cb:25:a8:3e:35:4a:fe:
ff:1f:16:b4:0d:e1:88:89:82:37:fe:7a:23:2b:26:
c2:ae:10:cb:aa:fb:7c:89:49:50:0c:90:05:93:41:
3f:3a:87:a0:ce:1e:5e:f9:0f:db:86:ab:54:cb:05:
da:51:e5:4a:33:2f:76:49:2c:13:f8:8f:ae:36:43:
13:22:ee:9f:2a:7c:00:81:4e:48:eb:8e:6d:84:9d:
35:7b:87:17:70:5e:6d:8e:b8:9c:d3:71:c7:7a:4d:
17:99:25:27:80:74:fa:9e:21:1e:da:63:fd:d1:67:
87:ba:15:36:5d:a1:36:35:31:5d:55:b0:77:48:35:
47:6b:27:62:97:f7:c3:95:62:a0:55:be:03:47:00:
da:cd:89:05:cf:e2:00:79:8a:c4:81:95:14:cd:a0:
78:39:3f:34:7c:c6:6f:81:9b:fc:12:63:b7:c1:7f:
ce:f8:60:8b:f2:3c:7a:95:02:83:1d:3e:16:f5:83:
57:3f:b6:e4:f2:67:5f:6e:39:91:4c:b7:a7:78:0e:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:80:59:7C:C6:B2:DA:8E:E5:F2:14:D2:53:FD:34:C4:06:4F:2E:5F
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f3:b6:1b:be:53:3d:ca:75:0a:e5:2f:50:eb:6c:39:e4:c9:
7a:fb:80:14:f9:98:0e:3b:ca:5a:7b:59:c4:7f:c8:2d:20:d7:
5b:ea:af:f4:b4:be:f8:f4:6a:22:9f:b5:67:40:c8:02:31:67:
b7:f1:86:26:c8:60:91:14:f2:23:f2:ea:1d:23:ef:97:73:4c:
e9:f4:1d:f4:d5:a2:39:3a:7a:97:87:f0:13:45:3e:67:20:1b:
cd:de:5a:04:8a:a0:b6:24:88:26:15:38:ba:ce:03:80:7d:5f:
b9:7e:0b:1e:23:56:16:97:bc:e0:2b:86:31:09:41:d1:a2:4d:
d7:02:ea:de:08:0a:27:f4:6c:3f:04:ec:65:10:c3:d3:70:f5:
dc:ec:25:bd:66:d2:fd:bc:67:cd:e3:7a:eb:40:93:49:70:49:
ba:04:a5:b1:37:56:1b:cb:3a:47:54:a0:3c:9b:75:73:8b:c2:
68:f8:f6:51:b7:2f:e3:da:fc:9a:d6:51:1a:b4:87:b8:70:82:
8c:e8:c6:ee:d5:5a:ea:de:aa:7c:fc:e3:c4:9e:76:c9:4e:cc:
05:35:a0:cb:77:5a:4d:25:df:8f:f9:9e:ab:05:c2:b0:06:a3:
06:6a:d1:3a:7f:b2:88:91:96:73:71:43:9c:36:9b:b3:e1:8a:
61:a1:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:42 2026 by rpki-client